Zero trust is guided by a set of design principles that replace implicit trust with explicit verification.

• Eliminate implicit trust
• Enforce least privilege access
• Use dynamic, policy-based access control
• Reduce trust zones and segmentation
• Verify every request explicitly
• Maintain continuous visibility
• Apply context-aware access decisions
• Protect data end to end

The slide references the Zero Trust Maturity Model Version 2.0 by CISA.

A zero trust architecture reduces the risk of lateral movement, broad network exposure, and unauthorized access by making policy evaluation explicit and continuous.